Jens/geointel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

preserve Tower Authentik operator login WIP
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 1m51s
Details
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 40s
Details
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 2m18s
Details

Browse Source
This commit is contained in:
Jens
2026-08-30 03:05:29 +02:00
parent 3627a05bfe
commit 4fdc3aa11b
18 changed files with 744 additions and 201 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/CODEX_EXECUTION_LOG.md
+5
View File
@@ -12947,3 +12947,8 @@ Open:
- Kept the historical evidence boundary explicit: this runtime receipt does not
invent human review, a historical training commit/container, protected-test
independence, national validity or a new promotion decision.
# 2026-08-26 — Additive Authentik operator login
- Added authorization-code OIDC with PKCE, signed state, nonce, strict issuer/audience validation and a verified e-mail allowlist.
- Kept the existing local single-operator login and API-enforced project-scoped guest demo unchanged.
- Added the Authentik action to the existing landing access card and documented the callback/environment contract.